[ Stefan Fritsch ]
* Move NameVirtualHost directive to ports.conf and switch from "*" to
"*:80". (Closes: #314606, #486286)
* Comment out the CacheEnable line in disk_cache.conf. It would have caused
problems with Etch to Lenny upgrades.
* Change the minimum user id for suexec back to 100, the new value of 1000
was too disruptive for existing configurations. (Closes: #488821)
* Add a default SSL virtual host. (Closes: #267477)
- Use snakeoil certificate by default (if ssl-cert is installed).
(Closes: #293524, #446765)
- Document this in README.Debian.
(Closes: #293469, #293519, #398520, #395823)
- Add MSIE workarounds. (Closes: #421802)
- Add ssl-cert to Recommends.
* Add a new config file /etc/apache2/conf.d/security with some vaguely
security related diectives. (Closes: #260063)
* Adjust mod_userdir accordingly. Also add "AllowOverride Indexes" for the
home directories.
* Disable SSLv2 by default. It is insecure. Also only enable ciphers with
key lengths of at least 128 bit.
* Make the init script complain about a missing $APACHE_PID_FILE during
"start", too, and not only during "stop" or "restart". This makes it more
obvious that /etc/apache2/envvars has to be updated. (Closes: #473982)
* Add hint about the "..., using 127.0.0.1 for ServerName" warning to
README.Debian. (Closes: #457708)
* Add hint about the "could not create rewrite_log_lock" error message to
README.Debian. (Closes: #450831)
* Remove empty dir from apache2-doc to fix Lintian warning.
* Always pass -g to gcc instead of relying on dpkg-buildpackage to set
CFLAGS. We always want the debug info for the apache2-dbg package.

[ Ryan Niebur ]
* Upgraded to policy 3.8.0
- added support for noopt in DEB_BUILD_OPTIONS
- added a README.source
- added support for parallel in DEB_BUILD_OPTIONS
* Dropped XS- from the Vcs fields in control

* Make the init script use normal 'stop' instead of 'graceful-stop' again:
With graceful-stop, it can take a long time until all child processes have
closed their listening sockets and there is no way for the init script to
know when it is save to start apache again. This could make the restart of
apache fail. (Closes: #486629, #463338)
* Improve package descriptions, thanks to Justin B Rye. (Closes: #486855)